Math Mapi Send.exe

  candun 19:18 13 Mar 2007

My Comodo Pro Firewall detects this file? attempting to access the internet thru iexplore.exe. The path is C:\Documents and Settings\Owner\Application Data\MeowAxisJunk\Math Mapi Send.exe. I deny access, but would appreciate any advice on this 'item'. I run WinXP SP2 on broadband.

  skidzy 19:48 13 Mar 2007

I have a sneaky suspicion this part of the Malware/Spyware

Run your Antispyware apps such as
Spybot search and Destroy

But if im correct about it being a variant of LOP you may need to run Hijackthis click here and post the log click here and let the experts deal with this.

  skidzy 20:52 13 Mar 2007

To add to my above post,do you have Messenger Plus Installed..check in add and remove programs.

If this is installed,you probably installed the sponsor also,this is bundled spyware from

  candun 21:50 13 Mar 2007

Skidzy, bear with me, some 'activity' on my computer.

  candun 22:23 13 Mar 2007

skidzy, I did have present a couple of months ago, yuk. Awaiting HJT results.

  candun 16:39 14 Mar 2007

skidzy, Still ongoing, carried out a mass of instructions/downloads/scans and re-sent 3 logs at 16.20. Awaiting results.

  skidzy 17:57 14 Mar 2007

This may take a while to sort out,stick with it to the end....i take you have posted your log at Malware removal.

  candun 18:42 14 Mar 2007

Techspot responded pretty quickly, and as I'm a member of that forum, I followed their instructions. I posted the original 'Math Mapi' query there recently with no meaningful response. I,ll register with Malware Remover and send HJT log if there,s no success with TSpot. Thanks for your suggestion skidzy, I'm a bit wary of HJT and this project will boost the old confidence.



  skidzy 19:04 14 Mar 2007

Just remember to let the experts analyze the HJT log,do not attempt to remove anything yourself unless absolutely positive you know what you are doing.

The thing with LOP, has mutiple registry entries that reinvent itself every time you reboot the will need to remove all the entries.

LOP is a nasty piece of work and has been around for a while now.Normally Superantispy would get rid of this,however if you have had this for a while...there's a good chance it has several registry entries all over the place.

Best of luck,dont forget to keep us informed.

  skidzy 19:06 14 Mar 2007

Superantispy click here

  candun 20:21 14 Mar 2007

I've downloaded the trial version of this prog. and will scan with it now. Today I scanned in windows safe mode after downloading SmitFraudFix,VundoFix,Look2Me-Destroyer and others and probs were found, but no '', so here goes.

Thanks again, I'll keep you posted.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Fujitsu Lifebook P727 laptop review

Microsoft Paint set to die after 32 years

Mac power user tips and hidden tricks

Comment désactiver la saisie intuitive et paramétrer votre clavier ?